1,898,581open jobs
111,191companies
252,577added this week
Browse all
Salary
$180k – $220k per year
Location
In office (Irvine)
Seniority
Principal · 12+ years exp

Confirmed on the employer's own hiring board on Oct 21, 2026. First seen by Alion on Sep 1, 2026. GHD scores B on the Alion truth index.

Overview
Company
Impact
Profile match

GHD

GHD is an employee-owned multidisciplinary professional services firm, headquartered in Sydney, Australia, providing engineering, architecture, environmental, advisory, digital and construction services for the water, energy and resources, transportation and property sectors. Founded in Melbourne in 1928, it has more than 14,000 people working from offices across Australia, New Zealand, North America, the UK, the Middle East, Latin America and Asia. The firm recruits graduate and senior civil, structural, electrical, mechanical, geotechnical and environmental engineers, scientists, project managers and technical directors, along with payroll and finance staff.

Who are we looking for?

We're looking for a Manager of Cyber Defence Strategy and Operations to join our Information Systems team, based in Irvine, California.

GHD is a global professional services company working across engineering, architecture, environment and advisory, helping our clients and communities meet the challenges of a changing world.

Our Enterprise Strategy 2035, “We Master Technology,” places technology at the heart of how we deliver, and within Information Services & Technology (IS&T) our Cyber & Information Security function protects the organisation, our people and our clients. We are looking for a leader to own its strategy and its operational edge.

As Manager - Cyber Defence Strategy and Operations, you will own GHD’s enterprise cybersecurity strategy and day-to-day operational resilience, and be the person who represents our cyber risk posture to the Chief Technology Officer, the IS Leadership Team and the Board Risk Committee. You will build genuine specialist depth beneath the Security Operations Centre, set and enforce enterprise security standards, and govern the security of an AI-era threat surface. This is both a strategic role and an operational command role, for a leader who is as credible in the boardroom as in the incident bridge.

Working with an energetic and high performing team, this position offers a variety of work and will see you involved in:

  • Develop and own GHD’s multi-year cybersecurity strategy and target-state security architecture.

  • Represent GHD’s cyber risk posture to the CTO, the IS Leadership Team and the Board Risk Committee.

  • Build specialist sub-teams (security architecture, vulnerability management, cyber GRC) to relieve the SOC of non-response work and restore true follow-the-sun coverage.

  • Own the enterprise vulnerability-management programme and drive a measured remediation cadence with clear ownership.

  • Command incident response for significant events, coordinating IT, Legal, HR and Communications.

  • Define and govern the Zero Trust programme across GHD’s Azure, identity and endpoint estate.

  • Own GHD’s AI security posture: agentic systems, non-human identities and shadow AI.

  • Govern CMMC Level 2 and FedRAMP readiness as a commercial enabler for US Federal client work.

What you will bring to the team:

  • 12+ years in cyber security, including building and leading specialist sub-functions (not just running a single SOC), ideally in a large or global organisation.

  • Deep expertise across security strategy, operations, threat intelligence, vulnerability management and architecture, spanning cloud (Azure), endpoint, network, identity, application and data.

  • Strong Zero Trust and Microsoft security stack expertise (Defender, Sentinel, Entra ID, Purview).

  • Hands-on experience with regulatory frameworks: CMMC Level 2, FedRAMP, ASD Essential Eight, ISO 27001 and NIST CSF.

  • A track record of taking an organisation through a regulatory certification, and of presenting cyber risk to executive or board-level audiences.

  • Incident command experience, and the ability to set enterprise standards without creating adversarial relationships.

  • Certifications: CISSP, CISM or equivalent (required); CMMC Registered Practitioner or Professional (highly desirable); Microsoft SC-100 or AZ-500 (desirable).

Why you’ll love this role:

  • Enterprise cyber leadership reporting to the CTO, with direct Board Risk Committee visibility.

  • A build mandate: shape the strategy, the architecture and a genuine specialist team, not just keep the lights on.

  • Security as a growth lever, with CMMC and FedRAMP readiness opening US Federal client work.

  • The chance to define GHD’s AI security posture at a pivotal moment for the threat landscape.

  • A global remit, central to Strategy 2035, “We Master Technology.”

If you want to lead cyber defence for a global organisation at a defining moment, we would love to hear from you.Apply now.

The salary range for this position is $180,000 - $220,000. The posted salary range represents the expected hiring range for GHD locations in its major city centers. Ranges may vary for positions in other locations. At GHD, base salary is determined by your skills, experience, qualifications and work location. We are committed to offering competitive compensation and adhere to all relevant pay transparency legislation.

Take on some of the world’s toughest challenges - with everyone at GHD backing you every step of the way.

We'll give you control over your career, empower you to find innovative solutions and help you create a lasting impact. See where your commitment could take you with GHD!

As a multicultural organization, we encourage individual achievement and recognize the strength of a diverse workforce. GHD is an equal opportunity employer. We provide equal employment opportunities to all qualified employees and applicants without regard to race, color, religion, genetic information, national origin, sex (including same sex), sexual orientation, gender identity, pregnancy, childbirth, or related medical conditions, age, disability or handicap, citizenship status, service member status, or any other category protected by federal, state, or local law. Upon request, GHD will provide reasonable accommodation for applicants with disabilities throughout the recruitment and selection process.

Free account
Stop reading job ads. Get the ones that fit.
One free account turns this page into a shortlist built around your stack, your level and your pay.
Match on every job. Stack, seniority, pay and location, scored against your profile.
1,898,581 open roles. Read straight off company career pages, refreshed every day.
Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
Create a free account Continue with Google
Free forever. No card. Under a minute.

Your match

How well do you fit this role?
Two answers are enough for a real match. No account needed.
Check my fit
Answers stay in this browser until you create an account.

Recommended for you based on this role

Security
Similar stack
Same company
Irvine
Security Engineer 2 min ago
$104k per year • In office • Full-Time • 3+ years exp • Bachelor's Degree • Gainesville
Python
PowerShell
DevOps
Azure
IAM
Cybersecurity
ISO 27001
SIEM
Apply
≈ $94k – $182k per year (Estimated) • Hybrid • Full-Time • 5+ years exp • Bachelor's Degree • Plano
DevOps
GitHub
Cybersecurity
Qualys Cloud Platform
SonarQube
GDPR
Threat Modeling
Apply
≈ $30k – $79k per year (Estimated) • Hybrid • Full-Time • 10+ years exp • Bachelor's Degree • Johannesburg
Python
PowerShell
AI/ML
AI Agents
DevOps
Rest API
GCP
Prometheus
Azure
AWS
Cortex
Windows
Cybersecurity
MITRE ATT&CK
SIEM
Apply
≈ $34k – $81k per year (Estimated) • In office • 3+ years exp • Amstelveen
AI/ML
Red Teaming
DevOps
Azure
Management
Agile
Scrum
Apply
≈ $14k – $29k per year (Estimated) • Remote (India) • Full-Time • 7+ years exp • India
DevOps
Terraform
GCP
Azure
CI/CD
AWS
Docker
Kubernetes
Platform Engineering
Cybersecurity
SOC 2
GDPR
HIPAA
Apply
≈ $94k – $229k per year (Estimated) • In office • Full-Time • Sydney
DevOps
GCP
Azure
CI/CD
AWS
IAM
Cybersecurity
ISO 27001
Zero Trust
SIEM
OWASP
Apply
In office • Full-Time • Sydney
Python
PowerShell
DevOps
Azure
AWS
Cybersecurity
ISO 27001
GDPR
SIEM
Apply
Penetration Tester 4 days ago
In office • Full-Time • Sydney
Python
Ruby
PowerShell
Bash
AI/ML
Red Teaming
DevOps
GCP
Azure
AWS
Linux
Windows
Cybersecurity
Burp Suite
Metasploit
Nmap
Nessus
Cobalt Strike
ISO 27001
OWASP Top 10
CVE
CVSS
Apply
≈ $18k – $36k per year (Estimated) • In office • Full-Time • 8+ years exp • Mumbai
DevOps
GCP
Azure
AWS
Kubernetes
FinOps
Apply
$191k – $334k per year • Equity • Hybrid • Full-Time • 12+ years exp • Bachelor's Degree • Santa Clara
DevOps
GCP
Azure
CI/CD
GitOps
AWS
Kubernetes
Service Mesh
IAM
Management
ServiceNow
Apply
≈ $125k – $240k per year (Estimated) • In office • 10+ years exp • Bachelor's Degree • New York
Cybersecurity
NIST CSF
Apply
≈ $85k – $157k per year (Estimated) • In office • 5+ years exp • London
AI/ML
Red Teaming
DevOps
Azure
Cybersecurity
Microsoft Sentinel
Microsoft Defender
Microsoft Entra ID
Apply
≈ $97k – $235k per year (Estimated) • Hybrid • 12+ years exp • Sydney
AI/ML
AI Agents
DevOps
Azure
Cybersecurity
ISO 27001
NIST CSF
FedRAMP
Zero Trust
Microsoft Entra ID
Apply
$67k – $112k per year • In office • 10+ years exp • Bachelor's Degree • Dartmouth
Apply
$61k – $101k per year • Hybrid • 5+ years exp • Bachelor's Degree • Vancouver
Apply
≈ $49k – $90k per year (Estimated) • In office • Full-Time • Irvine
Life Sciences
GMP
Apply
≈ $155k – $288k per year (Estimated) • Hybrid • Full-Time • 10+ years exp • Bachelor's Degree • Irvine
Apply
Project Engineer 1 day ago
$77k per year • In office • Irvine
Apply
$135k – $200k per year • In office • 10+ years exp • Bachelor's Degree • Irvine
Apply
$139k – $196k per year • In office • Full-Time • 10+ years exp • Bachelor's Degree • Irvine
Management
Scrum
Apply
See all jobs
This is one of many
1,898,581 more open roles from verified company boards, updated every day.